What is Pharmacovigilance ? 


Pharmakon (Greek) = Medicinal Substances 
Vigilia (Latin) = To keep watch 


WHO Definition 

The science & activities relating to the 
detection, assessment, understanding & 
prevention of adverse effects or any other drug 
related problems 


















Pharmacovigilance audit activities shouid verify, by examination 
and evaination of objective evidence, the appropriateness and 
effectiveness of the impiementation and operation of a 
pharmacovigiiance system, inciuding its quaiity system for 
pharmacovig iiance a ctivities. 

in generai, a^^^^ is a systematic, discipiined, independent 
and documented process for obtaining evidence and evaiuating 
the evidence objectiveiy to determine the extent to which the 
audit criteria are fuifiiied, contributing to the improvement of 
risk management, controi and governance processes. 










/THE RISK-BASED APPROACH TO PV AUDITS 


e risk-based approach to audits focuses on the areas of highest risk to the 
anization's pharmacovigiiance system, inciuding its quality system for 
armacovigiiance activities. In the context of pharmacovigiiance, the risk to pubiic 
6 heaith is of prime importance. Risk can be assessed at the foiiowing stages: 

* Strategic ievei audit pianning resulting in an audit strategy (iong term approach), which 
shouid be endorsed by upper management 

* Tacticai ievei audit pianning resuiting in an audit programme, setting audit objectives, 
and the extent and boundaries, often termed as scope, of the audits in that 
programme 

O • Operationai ievei audit pianning resuiting in an audit pian for individuai audit 
ngagements, prioritizing audit tasks based on risk and utiiising risk-based sampiing 
d testing approaches, and reporting of audit findings in iine with their reiative risk 

evei and audit recommendations in iine with the suggested grading system 

O 
















The audit strategy is a high level statement of how the 
audit activities will be delivered over a period of time, 
longer than the annual programme, usually for a period 
of 2-5 years. 

The audit strategy includes a list of audits that could 
reasonably be performed. The audit strategy is used to 
outline the areas highlighted for audit, the audit topics 
as well as the methods and assumptions (including e.g. 
risk assessment) on which the audit programme is 
based. 










The audit strategy should cover the governance, risk 
management and internal controls of all parts of the 
pharmacovigilance system including: 

* All pharmacovigilance processes and tasks. 

• The quality system for pharmacovigilance activities. 

• Interactions and interfaces with other departments, as 
appropriate. 

* Pharmacovigilance activities conducted by affiliated 
organisations or activities delegated to another organisation 
(e.g. regional reporting centres, MAH affiliates or third 
parties, such as contract organisations and other vendors). 
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•This is a non-prioritized, non-exhaustive list of examples 
of risk factors that couid be considered for the purposes 
of a risk assessment: 


• 1- Changes to iegisiation and guidance 

• 2- Major re-organization or other re-structuring of the 
pharmacovigiiance system, mergers, acquisitions 
(specificaiiy for marketing authorization holders, this may 
lead to a significant Increase in the number of products 
for which the system is used) 


3- Change in key manageriai function 

4- First medicinai product on the market (for a marketing 
authorization hoider) 










5- Risk to availability of adequately trained and experienced 
pharmacovigilance staff, e.g. due to significant turn-over of 
staff, deficiencies in training processes, re-organization, 
increase in volumes of work 

6- Significant changes to the system since the time of a 
previous audit, e.g. introduction of a new database(s) for 
pharmacovigilance activities or of a significant upgrade to 
the existing database(s), changes to processes and activities 
in order to address new or amended regulatory requirements 

7- Medicinal product(s) on the market with specific risk 
minimization measures or other specific safety conditions 
such as requirements for additional monitoring 










PV AUDIT 


A TC 


I ir\ /n All 


^8^ Criti 




Criticality of the process, e.gTl 

* For national medicines authorities: how critical is the area/process to proper 
functioning of the pharmacovigilance system and the overall objective of 
safeguarding public health; 


* For marketing authorization holders: how critical is the area/process to proper 
functioning of the pharmacovigilance system. When deciding when to audit an 
affiliate or third party, the marketing authorization holder should consider the nature 
and criticality of the pharmacovigilance activities that are being performed by an 
affiliate or third party on behalf of the marketing authorization holder, in addition to 
considering the other factors included in this list 


- Outcome of previous audits, e.g. has the area/process ever been audited (if not, then 
lis may need to be prioritized depending on criticality); if the area/process h^ 


F^eviously been audited, the audit findings* are a factor to consider when deciding when 
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UDIT/ STRATEGIC LEVEL AUDIT PLANNING 



I 

CPO- Identified procedural gaps relating to specific areas/processes.' 

- Other information relating to compliance* with legislation and guidance, for* 
xample: 




* For national medicines authorities: information from compliance* metrics 
from complaints, from external sources, e.g. audits/assessments of the 
national medicines authority that may be conducted by external bodies. 


* For marketing authorization holders: information from compliance* metrics 
from inspections see Module III, from complaints, from other external 
sources, e.g. audits. 


2- Other organisational changes that could negatively impact on the 
rea/process, e.g. if a change occurs to a support function (such as information 
khnology support) this could negatively impact upon pharmacovigilance 
ities. 
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PV AUDIT/ TACTICAL LEVEL AUDIT PLANNING 

E_ 


•An audit programme is a set of one or more 
audits pianned for a specific timeframe, 
normaiiy for a year, it shouid be prepared in 
iine with the iong term audit strategy. The 
audit programme shouid be approved by 
upper management with overaii responsibiiity 
for operationai and governance structure. 












Ipy AUDIT/ TACTICAL LEVEL AUDIT PLANNING 


6 “ ■ 

. *7116 risk-based audit programme should be based 

^ on an appropriate risk assessment and should 
focus on: 

•The quality system for pharmacovigilance 
activities. 



Critical pharmacovigilance processes. 


Key control systems 
pharmacovigilance activities. 


relied on for 



Areas identified as high risk, after controls have 
9 been put in place or mitigating action taken. 
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PV AUDIT/ TACTICAL LEVEL AUDIT PLANNING 


The risk-based audit programme shouid also take into 


historical areas with insufficient oast audit 


cover 



The audi^ 


rogramme 

brief description of the plan 



account 

and high risk areas identified by and/or 
specific Tequests from management and/or persons 
responsibie for pharmacovigilance activities. 

documentation should include a 

ifor each audit to be 
"delivered, Including ar^utiine of scope and objectives. 

* The rationale for th ^Biifli!>| P» 

which form part of the audit 
o” programme should be based on the documented risk 
^sessment. 

r 




eriodicity and scope of 


lathe individual audits 











AUDIT/ OPERATIONAL LEVEL AUDIT PLANNING 




Planning and 
fieldwork 

• Reporting 













PV AUDIT/ OPERATIONAL LEVEL AUDIT PLANNING | 

Planning and fieldwork 


The organization should ensure that^j^^^^^^^^gare in place 
regardin g the planning and conduct of individual audits that will be 
deliverediE|^^^Q£for all the steps required for the performance 
of an individual audit should be settled in the relevant audit related 


procedures, and the organization should ensure that audits are 
conducted in accordance with the written procedures. 


* When planning individual audits, the auditor identifies and assesses 
the risks relevant to the area under review and employs the most 
> appropriate risk-based sampling and testing methods, 
) documenting the audit approach in an audit plan 











The findings of the auditors shouid be documented in an 
audit report and shouid be communicated to management 
in a timely manner. The audit process should include 
mechanisms for communicating the audit findings to the 
auditee and receiving feedback, and reporting the audit 
findings to management and relevant parties, including 
those responsible for pharmacovigilance systems, in 
accordance with legal requirements and guidance on 
pharmacovigilance audits. Audit findings should be 
reported in line with their relative risk level and should be 
graded in order to indicate their relative criticality to risks 
impacting the pharmacovigilance system, processes and 
parts of processes. 












AUDIT/ OPERATIONAL LEVEL AUDIT PLANNING 


• The grading system should be defined in the 


descriotion 

of 

the quality 

system 

for 

oharmacoviailance. 

and should 

take 

into 

consideration 

the 

thresholds noted 

below 

which 


would be used in further reporting 

* 1 -ISHnBBl is a fundamental weakness in one or more 
pharmacovigilance processes or practices that 
adversely affects the whole pharmacovigilance system 
and/or the rights, safety or well-being of patients, or 
that poses a potential risk to public health and/or 
represents a serious violation of applicable regulatory 
requirements. 














2- ^AMRM is a significant weakness in one or more 
pharmacovigiiance processes or practices, or a fundamentai 
weakness in part of one or more pharmacovigiiance processes or 
practices that is detrimentai to the whoie process and/or couid 
potentiaiiy adverseiy affect the rights, safety or weii-being of 
patients and/or couid potentiaiiy pose a risk to pubiic heaith 
and/or represents a vioiation of appiicabie reguiatory 
requirements which is however not considered serious. 

3- ^^QdE is a weakness in the part of one or more 
pharmacovigiiance processes or practices that is not expected to 
adverseiy affect the whoie pharmacovigiiance system or process 
and/or the rights, safety or weii-being of patients. 











ACTIONS BASED ON AUDIT OUTCOMES AND FOLLOW-UP 



*t*Actlons referenced In this section of the guideline, I.e., 
immediate action, prompt action, action within a reasonable 
timeframe, issues that need to be urgently addressed, or 
communicated in an expedited manner, are intended to 
convey timelines that are appropriate, relevant, and in line 
with the relative risk to the pharmacovigilance system. 
Corrective and preventive actions to address criticai and 
major issues shouid be prioritised. The precise timeframe 
for action(s) related to a given critical finding, for example. 


may differ depending on nature of findings and the planned 
action(s). 









IONS BASED ON AUDIT OUTCOMES AND FOLLOW-U 
L OF AUDITS 


•The management of the organization is 
responsibie for ensuring that the organization 
has a mechanism in piace to adequateiy 
address the issues arising from 
pharmacovigiiance audits. Actions shouid 
include root cause analysis and impact analysis 
of identified audit findings and preparation of a 
corrective and preventive action plan, where 
appropriate. 













ACTIONS BASED ON AUDIT OUTCOMES AND 
_ _ FOLLOW-UP OF AUDITS _ 


Upper management and those charged with 
governance, should ensure that effective action 
is implemented to address the audit findings. 
The implementation of agreed actions should be 
monitored in a systematic way, and the progress 
of implementation should be communicated on a 
periodic basis proportionate to the planned 
actions to upper management. 



ACTIONS BASED ON AUDIT OUTCOMES AN 
L FOLLOW-UP OF AUDITS 


* Evidence of completion of actions should be 
recorded in order to document that issues raised 
during the audit have been addressed. 

• Capacity for foliow-up audits should be foreseen 
in the audit programme. They should be carried 
out as deemed necessary, in order to verify the 
completion of agreed actions. 




QUALITY SYSTEM AND RECORD MANAGEMENT 

ERACnCES 


Jndependence and obiectivitv of audit work and auditors 



Auditors should be 


free, from interference 


m 


determining the scope of auditing, performing 
pharmacovigilance audits and communicating audit 
results. The main reporting line should be to the 
upper management with overall responsibility for 
operational and governance structure that allows the 

auditor(s) to fulfil their responsibilities and to 

) 

pmvide independent, objective audit opinion. 



QUALITY SYSTEM AND RECORD MANAGEMENT 
■ PRACTICES 


Independence and objectivity of audit work and auditors ^ 

Auditors can consult with technical experts, 
personnel involved in pharmacovigilance processes, 
and with the person responsibie for 
pharmacovigilance; hov^er auditors should 
maintain that aliows them to 

perform audit work in such a manner that they have 
an honest beiief in their work product and that no 
significant quality compromises are made. 
Objectivity requires auditors not to subordinate 
their Judgement on audit matters to that of others. 



QUALITY SYSTEM AND RECORD MANAGEMENT 
_ PRACTICES _ 


Qualifications, skills and experience of auditors and continuing 

professional development 

The proficiency of audit team members wiii have been gained 
through a combination of education, work experience and training 
and, as a team, shouid cover knowiedge, skiiis and abiiities in: 

* Audit principies, procedures and techniques. 

* Appiicable iaws, reguiations and other requirements reievant to 
pharmacovigiiance. 

* Pharmacovigiiance activities, processes and system(s). 

* Management system(s). 

* Organizationai system(s). 



UNDERTAKEN BY OUTSOURCED AUDIT SERVICE 

_ PROVIDERS 


* Where the organization decides to use an outsourced audit service t 
provider to impiement the pharmacovigilance audit requirements on the 
basis of this GVP and perform pharmacovigiiance audits: 

* The requirements and preparation of the audit risk assessment, the 
audit strategy and audit programme and individuai engagements 
shouid be specified to the outsourced service providers, by the 
organization, in writing. 

* The scope, objectives and procedurai requirements for the audit 
should be specified to the outsourced service provider, by the 
organization, in writing. 

* The organization shouid obtain and document assurance of the 
independence and objectivity of outsourced service providers. 

* The outsourced audit service provider shouid aiso foiiow the 
reievant parts of this GVP. 
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PV-INSPECTION 


System and product-related inspections 


* Pharmacovigilance system inspections are designed to 
reyiew the procedures, systems, personnel, and facilities in 
place and determine their compliance with regulatory 
pharmacoyigilance obligations. As part of this reyiew, 
product specific examples may be used to demonstrate the 
operation of the pharmacoyigi lance system. 

* Product-related pharmacoyigilance inspections are 
primarily focused on product-related pharmacoyigilance 
issues, including product-specific actiyities and 
documentation, rather than a general system reyiew. Some 
aspects of the general system may still be examined as part 
of a product-related inspection (e.g. the system used for 
that product). 




Routine and “for cause” pharmacoviqilance inspections 

Routine pharmacovigilance inspections are inspections scheduied in 
advance as part of inspection programmes. There is no specific trigger 
to initiate these inspections, although a risk-based approach to 
optimize supervisory activities should be implemented. These 
inspections are usually system inspections but one or more specific 
products may be selected as examples to verify the implementation of 
the system and to provide practical evidence of its functioning and 
compliance. Particular concerns, e.g. raised by assessors, may also be 
included in the scope of a routine inspection, in order to investigate 
jthe specific issues. 









Routine and “for cause” pharmacoviailance inspections 

For cause pharmacovigiiance inspections are undertaken 
when a trigger is recognized, and an inspection is 
considered an appropriate way to examine the issues. For 
cause inspections are more likely to focus on specific 
pharmacovigiiance processes or to include an 
examination of identified compliance issues and their 
impact for a specific product. However, full system 
inspections may also be performed resulting from a 
trigger. 










Routine and “for cause” pharmacoviailance inspections 

For cause inspections may arise when, for exampie, one 
or more of the triggers listed below are identified but no 
limited to: 

• 1 - Risk-benefit balance of the product 

• 2- Reporting obligations 

• 3- Requests from the national medicines authorities 

• 4- Fulfilment of commitments 

• 5- Inspections 

• 6- Others 









INSPECTION 



* Change in the risk-benefit baiance where further examination 
through an inspection is considered appropriate. 


* Deiays or faiiure to identify or communicate a risk or a change 
in the risk-benefit baiance. 

* Communication of information on pharmacovigilance concerns 
to the general public without giving prior or simultaneous 
notification to the national medicines authorities, as applicable. 

* Non-compliance or product safety issues identified during the 
monitoring of pharmacovigi lance activities by the national 
medicines authorities; 

* Suspension or product withdrawal with no advance notice to the 
national medicines authorities 









• For cause inspection cases 

•Reporting obligations (expedited and periodic): 

• Delays or omissions in reporting 

• Poor quality or incomplete reports 

• Inconsistencies between reports and other 
information sources 










• Requests from the national medicines 
authorities: 

• Failure to provide the requested information 
or data within the deadline specified by the 
national medicines authorities; 

•Poor quality or inadequate provision of data 
to fulfil requests for information from the 
national medicines authorities 









V-INSPECTION 


* For cause inspection cases 

* Fulfilment of commitments: 

•Concerns about the status or fulfilment of risk 
management plan (RMP) commitments. 

• Delays or failure to carry out specific obligations 
relating to the monitoring of product safety, 
identified at the time of the marketing 
authorization. 


Poor quality of reports requested as specific 
obligations. 








INSPECTION 


• For cause inspection cases 

• Inspections 

* Delays In the implementation or inappropriate 
implementation of corrective and preventive actions. 

* Information such as non-compliance or product safety 
issues from other types of inspections (CCP, GMP, CLP 
and GDP). 

* Inspection information received from other international 
authorities, which may highlight Issues of non- 
compliance 













INSPECTION 


* For cause inspection cases 

• Concerns following review of the pharmacovigilance 
system master file. 

• Non-inspection related information received from 
other authorities, which may highlight issues of 
non-compliance. 

• Other sources of information or complaints. 












BMTgiiHtKBnTOilm av be conducted on a routine basis 
as part of a routine inspection programme. Risk 
factors wiil be assessed in order to prioritize re¬ 
inspections. Early re-inspection may take place where 
significant non-compliance has been identified and 
where it is necessary to verify actions taken to address 
findings and to evaluate ongoing compliance with the 
obligations, including evaluation of changes in the 
pharmacovigilance system. Early re-inspection may 
also be appropriate when it is known from a previous 
inspection that the inspected party had failed to 
implement appropriately corrective and preventive 
actions in response to an earlier inspection. 









REMOTE INSPECTION 


• These are ^armacovigilance inspections performed by 
inspectors from the premises of the marketing 

authorization holder or firms employed by the marketing 
authorization holder. Communication mechanisms such as 
the internet or telephone may be used in the conduct of the 
inspection. For example, in cases where key sites for 
pharmacovigilance activities are located outside the Arab 
Country concerned or a third party service provider is not 
available at the actual inspection site, but it is feasible to 
arrange interviews of relevant staff and review of 
documentation, including the safety database, source 
documents and pharmacovigilance system master file, via 
remote access. 








This approach may also be taken where there are logistical 
challenges to an on-site inspection during exceptional 
circumstances (e.g. a pandemic outbreak or travel 
restrictions). Such approaches are taken at the discretion of 
the inspectors and in agreement with the body 
commissioning the inspection. The logistical aspects of the 
remote inspection should be considered following liaison 
with the marketing authorization holder. 

Where feasible, a remote inspection may lead to a visit to 
the inspection site if it is considered that the remote 
inspection has revealed issues which require on-site 
inspection or if the objectives of the inspection could not 
be met by remote inspection. 








INSPECTION PLANNING 


* Factors which may be taken into consideration, as 
appropriate, by the nationai medicines authorities 
when estabiishing pharmacovigiiance inspection 
programmes inciude, but are not iimited to: 

• 1- inspection reiated: 

* compiiance history identified during previous 
pharmacovigiiance inspections or other types of 
inspections (GCP, GMP, GLP and GDP). 

• re-inspection date recommended by the inspectors 
or assessors as a resuit of a previous inspection. 









Factors which may be taken into consideration, as appropriate, by 
the nationai medicines authorities when estabiishing 
pharmacovigiiance inspection programmes inciude, but are not 
limited to: 

2- product related: 

* product with additional pharmacovigiiance activities or risk- 
minimization activities. 

* authorization with conditions associated with safety, e.g. 
requirement for post-authorization safety studies (PASS) or 
designation for additional monitoring. 

* product(s) with large sales volume, i.e. products associated 
with large patient exposure in the Arab Country concerned. 

* product(s) with limited alternative in the market place. 
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Factors which may be taken into consideration, as appropriate, by the national 

medicines authorities when estabiishing pharmacovigiiance inspection programmes 

include, but are not limited to: 

3- Marketing authorisation holder related: 

* marketing authorisation hoider that has never been subject to a pharmacovigiiance 
inspection. 

* marketing authorisation hoider with many products on the market in the Arab 
Country concerned. 

* resources available to the marketing authorisation hoider for the pharmacovigiiance 
activities they undertake. 

* marketing authorisation hoider with no previous marketing authorisations in the 
Arab Country concerned. 

* negative information and/or safety concerns raised by the national medicines 
authority, other bodies/medicines authorities outside the Arab Country concerned 
or other areas (i.e. GCP, CMP, CLP and GDP). 

* changes in the marketing authorisation holder organisation, such as mergers and 
acquisitions 









V INSPECTION PLANNING 


* Factors which may be taken into consideration, as appropriate, by 
the national medicines authorities when establishing 
pharmacovigilance inspection programmes include, but are not 
limited to: 

• 4- PV system related: 

* QPPV change 

* changes to the pharmacovigilance safety database(s), which 
could include a change in the database itself or associated 
databases, the validation status of the database as well as 
information about transferred or migrated data. 

* changes in contractual arrangements with pharmacovigilance 
service providers or the sites at which pharmacovigilance is 
conducted. 

* delegation or transfer of pharmacovigilance system master file 
management. 










* Collecting, receiving and exchanging reports - from all types of 
sources, sites and departments within the pharmacovigilance 
system. 

* Assessment, including mechanisms for obtaining and recording 
reporter assessments, company application of event terms, 
seriousness, expectedness and causality 

* Follow-up and outcome recording, for example final outcome of 
cases of exposure in pregnancy and medical confirmation of 
consumer reported events; 

* Reporting according to the requirements for various types of 
reported ICSRs, including onward reporting to the relevant bodies 
and timeliness of such reporting; 

* Record keeping and archiving for ICSRs 








Periodic safety update reports (PBRER). (as applicable) 

Completeness and accuracy of the data included, 
appropriateness of decisions concerning data that are 
not included. 

Addressing safety topics, providing relevant analyses 
and actions. 

Formatting according to requirements. 

Timeliness of submissions. 









Use of all relevant sources of information for signai detection; 

Appropriately applied methodoiogy concerning anaiysis. 

Appropriateness of investigations and foliow-up actions, e.g. the 
implementation of recommendations foliowing data review. 

impiementation of the RMP, or other commitments, e.g. conditions 
of marketing authorization. 

Timely identification and provision of complete and accurate data 
to the medicines authority of the Arab Country concerned, in 
particular in response to specific requests for data. 

impiementation of approved changes to safety communications 
and product information 









Interventional (where appropriate) and non-interventional clinical trials 

Reporting suspected unexpected serious adverse reactions (SUSARs) and 
non-interventional study cases according to the national regulations. 

Receiving, recording and assessing cases from interventional and non- 
interventional trials. 

Submission of study results and relevant safety information (e.g. 
development safety update reports (DSURs) and information included in 
PBRERs), where applicable, PASS or post-authorization efficacy studies 
(PAES) submissions, particularly when associated with specific obligations 
or RMP commitments. 

Appropriate selection of reference safety information, maintenance of 
investigator brochures and patient information with respect to safety. 

The inclusion of study data in ongoing safety evaluation 









• QPPV/LSR roles and responsibilities, e.g. access to the quality system, the pharmacovigilance 
system master file, performance metrics, audit and inspection reports, and their ability to 
take action to improve compliance; 

• the roles and responsibilities of the marketing authorization holder in relation to the 
pharmacovigilance system; 

• accuracy, completeness and maintenance of the pharmacovigilance system master file; 

• quality and adequacy of training, qualifications and experience of staff; 

• coverage and adherence to the quality system in relation to pharmacovigilance, including 
quality controi and quality assurance processes; 

• fitness for purpose of computerized systems; 

• contracts and agreements with aii reievant parties appropriately reflect responsibilities and 
activities in the fuifilment of pharmacovigilance, and are adhered to. 

• As a general approach, a marketing authorization holder should be inspected on the basis of 
risk-based considerations, but it is recommended to routineiy inspect MAH at least once 
every 4 years. 














